A package should not contain a (concretized) spec. A spec may be concretized, but I don't really know what it means for a package to be concretized. See #5600 for some related discussion. Cc: @tgamblin @scheibelp